mirror of
https://github.com/freeipa/ansible-freeipa.git
synced 2026-06-11 19:25:54 +00:00
56a8acedf0
It is now possible to use domain+ca as suffix, That means that the segment will be handled for the suffixes domain and also ca. The new state checked is returning two lists found and not-found. If a segment exists, the ckecked suffix is added to the found list. If a segment from suffix is not found, it is added to the not-found list. New example playbooks have been added: playbooks/topology/add-topologysegments.yml playbooks/topology/check-topologysegments.yml playbooks/topology/delete-topologysegments.yml The cluster playbook has been extended by the
24 lines
763 B
YAML
24 lines
763 B
YAML
---
|
|
- name: Add topology segments
|
|
hosts: ipaserver
|
|
become: true
|
|
gather_facts: false
|
|
|
|
vars:
|
|
ipatopology_segments:
|
|
- {suffix: domain, left: replica1.test.local, right: replica2.test.local}
|
|
- {suffix: domain, left: replica2.test.local, right: replica3.test.local}
|
|
- {suffix: domain, left: replica3.test.local, right: replica4.test.local}
|
|
- {suffix: domain+ca, left: replica4.test.local, right: replica1.test.local}
|
|
|
|
tasks:
|
|
- name: Add topology segment
|
|
ipatopologysegment:
|
|
password: "{{ ipaadmin_password }}"
|
|
suffix: "{{ item.suffix }}"
|
|
name: "{{ item.name | default(omit) }}"
|
|
left: "{{ item.left }}"
|
|
right: "{{ item.right }}"
|
|
state: present
|
|
loop: "{{ ipatopology_segments | default([]) }}"
|